Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: WZhXm9FCgWC1OgYJdJ004wK3zNfesKgXSsIyaSRvdpY=
Subject key identifier: AD:34:6F:9D:0A:2A:16:B6:C4:04:14:E1:FF:B1:33:76:84:98:17:C2
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 0196440D071B12DFA26DB2860EE210009DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 14F7
Signing time: Thu 17 Apr 2025 14:00:26 +0000
Manifest this update: Thu 17 Apr 2025 14:00:26 +0000
Manifest next update: Fri 18 Apr 2025 14:00:26 +0000
Files and hashes: 1: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: 8hV7nMiLNtDzHd9wqEexkm/+rx4OZ80KUSc0AOxue9g=)
2: XmJ8vYGbQYVnd8y-h4wRzi3J_pE.roa (hash: exnN1l7i5NuQ19i+bMh7iG0NXDBSnKZN8vpjyWS2vRc=)
3: XrhvNCYQn9v_ZtENdKVZ3VLduJc.roa (hash: aN/R4IVeQqrz28tH9akl71ra6TmpBihdrIjUuL23MYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0d:07:1b:12:df:a2:6d:b2:86:0e:e2:10:00:9d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Apr 17 14:00:26 2025 GMT
Not After : Apr 18 14:00:26 2025 GMT
Subject: CN=ad346f9d0a2a16b6c40414e1ffb13376849817c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:0e:05:5e:49:3e:d4:5f:74:62:5d:b1:29:
4c:37:8c:67:11:2f:29:1e:17:b5:f3:19:61:0c:33:
38:12:8b:0c:ba:39:84:ea:01:d7:68:ba:04:47:e6:
eb:6d:dd:c5:a1:21:75:1f:ab:54:32:b9:b5:ba:39:
eb:3d:04:28:8e:70:d6:58:dd:84:c4:3e:11:11:75:
86:60:f4:a4:74:f1:09:82:50:a2:b4:e1:00:21:90:
08:94:98:2d:d1:34:12:87:cc:d9:b7:7e:f1:56:ad:
e3:ac:66:a8:c1:5f:00:59:20:57:2b:c1:46:e5:87:
22:20:4c:97:f7:59:c4:92:a1:e5:8e:77:8f:ee:33:
33:da:08:dc:55:c8:ba:41:dc:40:32:2d:40:fe:2a:
8b:a5:9f:5a:91:f7:32:86:6e:47:11:f9:59:0e:24:
47:e3:41:8c:17:bc:0f:34:36:fe:8e:18:e7:b2:e4:
14:48:1e:90:ad:93:26:4c:0f:a3:2d:d9:c9:9b:9c:
f6:e5:12:48:e7:b7:dd:76:af:26:49:f5:5f:87:26:
a3:a6:18:50:4b:02:d0:16:67:26:d6:c3:33:12:5e:
34:44:a1:57:b3:19:71:d1:e9:63:1a:ee:9e:9d:27:
7b:66:f3:cf:c7:c6:34:82:c3:f3:8e:1c:6f:36:cb:
be:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:34:6F:9D:0A:2A:16:B6:C4:04:14:E1:FF:B1:33:76:84:98:17:C2
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:16:4e:6b:e3:88:5c:33:67:0d:17:c8:b9:85:44:1a:68:c4:
ab:08:63:52:1f:de:44:08:33:d3:c3:16:b7:fb:e6:10:bc:d5:
60:e9:b8:17:2d:9d:51:8b:d3:8b:ed:fd:9f:7e:ec:cb:18:9b:
f5:48:3b:f9:6a:de:21:ba:bb:9b:3c:94:a1:9e:d0:a2:92:8c:
6a:36:1e:3f:f0:f4:7a:33:2c:14:89:84:9a:38:f9:de:27:5b:
b4:5b:d6:f5:ca:db:bf:ff:aa:20:45:b7:ad:ae:5d:f5:47:e1:
52:f5:d2:b3:e3:b3:21:db:3e:fe:3e:2f:8d:ec:1c:6d:80:39:
cc:f4:ca:04:4e:78:28:a3:04:f7:77:2c:28:3d:dc:f9:6a:9b:
4f:14:3b:cc:84:48:18:1d:f4:00:dd:5b:6d:49:1a:40:6b:87:
ad:14:13:fd:59:a2:6f:48:46:f0:b9:49:0c:f1:ba:70:ca:a6:
07:b7:55:50:c6:ed:6f:51:51:03:9c:e1:23:5e:26:fd:41:d2:
ea:f3:2e:4a:b6:0b:80:51:89:33:ff:df:1e:af:fc:7c:f5:61:
44:6f:e7:f2:9f:f3:91:03:3f:65:c5:84:c3:8a:dd:5a:a7:06:
12:2f:be:02:5d:bc:1c:4a:9f:d4:ea:d8:8c:2f:a0:6a:4f:70:
9d:ef:a4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:22:34 2025 by rpki-client